onyx
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with API endpoints andjqto process JSON responses. - [EXTERNAL_DOWNLOADS]: The skill connects to
cloud.onyx.appto perform knowledge base operations, which is the official domain for the Onyx service. - [CREDENTIALS_UNSAFE]: Authentication is managed via the
$ONYX_TOKENenvironment variable, avoiding the use of hardcoded secrets. - [DATA_EXFILTRATION]: User queries and document content are transmitted to the Onyx API as part of the skill's core functionality.
Audit Metadata